CVE-2026-47214: Docling: Unsafe URI and Path Handling in HTML Backend
Impact The HTML backend did not perform sufficient validation during resource handling: - Accepted file:// URIs enabling local file system access when enablelocalfetch=True - Path resolution allowed traversal outside intended directories via ../ sequences and absolute paths - Did not block internal network resources under enableremotefetch=True - HTTP redirects were not validated, potentially redirecting to unintended schemes - No resource limits for remote image downloads and data: URIs
Patches Fixed in versions 2.91.0 (initial fixes) and 2.94.0 (additional improvements). The fixes implement: - Updated local path treatment: absolute files always blocked, relative paths require enablelocalfetch=True (default: False) and containment within configured basepath for path traversal protection - file:// scheme stripped & treated as local path (above) - IP address validation to prevent SSRF - HTTP redirect validation, connection and read timeouts - Size limit for both remote images (with streaming download) and base64-decoded data URIs
Workarounds Keep both enablelocalfetch=False and enableremotefetch=False (defaults) when processing untrusted HTML documents.
References - Initial fixes: v2.91.0 - Additional improvements: v2.94.0
Other sources
Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. Prior to 2.94.0, the HTML backend has unsafe URI and path handling. This vulnerability is fixed in 2.94.0.
— MITRE
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
pip/doclingto a version that resolves this vulnerability.Fixed in 2.94.0 - Upgrade
Upgrade
doclingto a version that resolves this vulnerability.Fixed in 2.91.0 - Upgrade
Upgrade
doclingto a version that resolves this vulnerability.Fixed in 2.94.0 - Configuration
Keep enable_local_fetch=False (default) when processing untrusted HTML documents to prevent accepted file:// URIs enabling local file system access.
Docling HTML backend enable_local_fetch = False - Configuration
Keep enable_remote_fetch=False (default) when processing untrusted HTML documents to avoid remote resource fetching that was insufficiently controlled prior to 2.94.0.
Docling HTML backend enable_remote_fetch = False
Event History
Frequently Asked Questions
What is the severity of CVE-2026-47214?
The severity of CVE-2026-47214 is rated as high with a score of 7.1.
What vulnerabilities are associated with CVE-2026-47214?
CVE-2026-47214 is associated with Path Traversal and Server-Side Request Forgery (SSRF) vulnerabilities.
How do I fix CVE-2026-47214?
To fix CVE-2026-47214, update to the latest version of the affected software as released by the maintainers in subsequent updates.
What impact does CVE-2026-47214 have on my system?
CVE-2026-47214 can lead to unauthorized local file system access and directory traversal, potentially exposing sensitive files.
Which software is affected by CVE-2026-47214?
CVE-2026-47214 affects the pip and docling software.